Add Voxel.sh DNS public suffixes #1014
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ghost
marked this pull request as ready for review
dnsguru
reviewed
May 22, 2020
There was a problem hiding this comment.
Zone(s) DNS authority reviewed
# dig +short TXT _psl.neko.am
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.nyaa.am
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.be.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.cat.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.es.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.eu.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.gg.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.mc.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.us.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.xy.ax
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.nl.ci
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.xx.gl
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.app.gp
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.blog.gt
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.de.gt
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.to.gt
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.be.gy
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.cc.hn
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.blog.kg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.io.kg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.jp.kg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.tv.kg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.uk.kg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.us.kg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.de.ls
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.at.md
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.de.md
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.jp.md
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.to.md
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.uwu.nu
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.indie.porn
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.vxl.sh
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.ch.tc
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.me.tc
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.we.tc
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.nyan.to
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.at.vg
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.blog.vu
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.dev.vu
"https://github.com/publicsuffix/list/pull/1014"
# dig +short TXT _psl.me.vu
"https://github.com/publicsuffix/list/pull/1014"
dnsguru
approved these changes
May 22, 2020
|
Tests Completed / Passed |
Closed
10 tasks
This was referenced Oct 2, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of Organization
Organization Website: https://voxel.sh/dns/
Voxel.sh is an internet infrastructure project run by a small group of individual volunteers. I'm leading this project. We're running our own anycast DNS clusters and are currently working on an authoritative DNS service with focus on free Third Level Domains ("free subdomains") for projects or individuals who don't necessary need an own paid domain.
We're close to release and would like PSL inclusion before launch for the reasons listed below. Right now, during internal testing phase, there are only a few domains active, like my own homepage at https://mia.vxl.sh/.
I closed my previous pull request at #953 due to our project name change.
Reason for PSL Inclusion
All Third Level Domains are completely independent and should be protected by browsers' security features. (e.g. to prevent setting cookies on the parent domain and hostname highlighting where supported)
We're using HTTP Strict Transport Security (HSTS) on all domains (including subdomains and preloaded). This means that all subscribers need to obtain TLS certificates for their domains. While not the main reason for this pull request, an addition would help us acquire higher limits with ACME issuers.
We allow name server delegation of our Third-Level-Domains by NS record and we've learned that some DNS, hosting and proxy services validate domains using the PSL in order to prevent users from accidentally adding subdomains instead of their main domain.
We will not use wildcard TLS certificates on the parent domains nor will there be any content. Domains are currently set up to redirect to the project page, informing anyone interested how to obtain a subdomain in the future.
DNS Verification via dig
make test